Lucene search
+L

1 matches found

Veracode
Veracode
added 2023/09/13 5:47 a.m.16 views

Use Of Insufficiently Random Values

Magento LTS is vulnerable to Use of Insufficiently Random Values. The vulnerability is caused by not generating sufficient length protectcode value as part of guest order cookie - guest-view and not implementing a rate limiting in the end point e.g: /magento19/index.php/default/sales/guest/view/...

7.5CVSS6.4AI score0.00823EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder